What is the severity of CVE-2017-6782?

CVE-2017-6782 is classified as a medium severity vulnerability due to the potential impact on the administrative web interface of Cisco Prime Infrastructure.

How do I fix CVE-2017-6782?

To remediate CVE-2017-6782, upgrade Cisco Prime Infrastructure to version 3.2(0.1) or later, which contains the necessary patches.

Who is affected by CVE-2017-6782?

CVE-2017-6782 affects users of Cisco Prime Infrastructure specifically version 3.2(0.0).

What type of attack can exploit CVE-2017-6782?

CVE-2017-6782 can be exploited by an authenticated, remote attacker who is able to manipulate the web interface due to improper sanitization of parameter values.

Is CVE-2017-6782 easy to exploit?

Exploiting CVE-2017-6782 requires authenticated access to the Cisco Prime Infrastructure web interface, which may limit its ease of exploitation.

Vulnerability/
CVE-2017-6782

medium

5.4

CWE

17/8/2017

16/9/2024

CVE-2017-6782: Code Injection

First published: Thu Aug 17 2017(Updated: )

A vulnerability in the administrative web interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to modify a page in the web interface of the affected application. The vulnerability is due to improper sanitization of parameter values by the affected application. An attacker could exploit this vulnerability by injecting malicious code into an affected parameter and persuading a user to access a web page that triggers the rendering of the injected code. Cisco Bug IDs: CSCve47074. Known Affected Releases: 3.2(0.0).

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco Prime Infrastructure	=3.2\(0.0\)

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2017-6782?
CVE-2017-6782 is classified as a medium severity vulnerability due to the potential impact on the administrative web interface of Cisco Prime Infrastructure.
How do I fix CVE-2017-6782?
To remediate CVE-2017-6782, upgrade Cisco Prime Infrastructure to version 3.2(0.1) or later, which contains the necessary patches.
Who is affected by CVE-2017-6782?
CVE-2017-6782 affects users of Cisco Prime Infrastructure specifically version 3.2(0.0).
What type of attack can exploit CVE-2017-6782?
CVE-2017-6782 can be exploited by an authenticated, remote attacker who is able to manipulate the web interface due to improper sanitization of parameter values.
Is CVE-2017-6782 easy to exploit?
Exploiting CVE-2017-6782 requires authenticated access to the Cisco Prime Infrastructure web interface, which may limit its ease of exploitation.

collector/nvd-index
agent/softwarecombine
agent/type
agent/references
agent/weakness
agent/author
agent/severity
agent/tags
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/event
agent/source
vendor/cisco
canonical/cisco prime infrastructure
version/cisco prime infrastructure/3.2\(0.0\)

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.